Debian: Security Advisory (DSA-3232-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows NTLM automatically authenticates via SMB when following a file:// URL

Overview Software running on Microsoft Windows that utilizes HTTP requests can be forwarded to a file:// protocol on a malicious server, which causes Windows to automatically attempt authentication via SMB to the malicious server in some circumstances. The encrypted form of the user's credentials...

Mandriva Linux Security Advisory : curl (MDVSA-2015:098)

Updated curl packages fix security vulnerabilities : Paras Sethia discovered that libcurl would sometimes mix up multiple HTTP and HTTPS connections with NTLM authentication to the same server, sending requests for one user over the connection authenticated as a different user CVE-2014-0015...

“Tear forced war”in the second quarter: Google found Windows 7 and Windows 8.1 there is a local mentioning right and sandbox escape vulnerabilities, Microsoft deny it-vulnerability warning-the black bar safety net

The Google security team recently found that Windows 7 and Windows 8.1 there is a local mentioning right and sandbox escape vulnerabilities, it was Microsoft's ruthless denied. Google will publish vulnerability details and POC. Vulnerability description This problem exists in theoperating systems...

Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation

A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...

ProxyDroid - Set Proxys (Http / Socks4 / Socks5) on your Android devices

ProxyDroid is an app that can help you to set the proxy http / socks4 / socks5 on your android devices. FEATURES 1. Support HTTP / HTTPS / SOCKS4 / SOCKS5 proxy 2. Support basic / NTLM / NTLMv2 authentication methods 3. Individual proxy for only one or several apps 4. Multiple profiles support 5...

Microsoft Windows 8.1 - Local WebDAV NTLM Reflection Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=222 Windows: Local WebDAV NTLM Reflection Elevation of Privilege Platform: Windows 8.1 Update, Windows 7 Class: Elevation of Privilege Summary: A default installation of Windows 7/8 can be made to perform a NTLM reflectio...

Microsoft Windows 8.1 - Local WebDAV NTLM Reflection Privilege Escalation

Microsoft Windows 8.1 - Local WebDAV NTLM Reflection Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=222 Windows: Local WebDAV NTLM Reflection Elevation of Privilege Platform: Windows 8.1 Update, Windows 7 Class: Elevation of Privilege Summary: A...

Fortinet Single Sign On - Stack Overflow

Advisory Information Title: Fortinet Single Sign On Stack Overflow Advisory ID: CORE-2015-0006 Advisory URL: http://www.coresecurity.com/advisories/fortinet-single-sign-on-stack-overflow Date published: 2015-03-18 Date of last update: 2015-03-18 Vendors contacted: Fortinet Release mode:...

Extract data from pcap files: PCredz

Extract data from pcap files with PCredz This tool extracts Credit card numbers, NTLMDCE-RPC, HTTP, SQL, LDAP, etc, Kerberos AS-REQ Pre-Auth etype 23, HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface. PCredz Features: Extract from a pcap file or from a live...

Windows Escalate Golden Ticket

This module will create a Golden Kerberos Ticket using the Mimikatz Kiwi Extension. If no options are applied it will attempt to identify the current domain, the domain administrator account, the target domain SID, and retrieve the krbtgt NTLM hash from the database. By default the well-known...

Oracle Solaris Third-Party Patch Update : fetchmail (multiple_vulnerabilities_in_fetchmail) (BEAST)

The remote Solaris system is missing necessary patches to address security updates : - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained...

Skeleton Key Malware Bypasses Active Directory Authentication

Enterprise Active Directory administrators need to be on the lookout for anomalous privileged user activity after the discovery of malware capable of bypassing single-factor authentication on AD that was used as part of a larger cyberespionage campaign against a global company based in London...

Windows Password Kracker - Free Windows Password Recovery Software

Windows Password Kracker is a free software to recover the lost or forgotten Windows password. It can quickly recover the original windows password from either LM LAN Manager or NTLM NT LAN Manager Hash. Windows encrypts the login password using LM or NTLM hash algorithm. Since these are one way...

SMTP NTLM Domain Extraction

Extract the Windows domain name from an SMTP NTLM challenge. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMTP NTLM Domain Extraction', 'Description' = 'Extract the Windows domain name from ...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2014:1098-1)

MozillaThunderbird was updated to Thunderbird 31.1.0 bnc894370, fixinfg security issues : - MFSA 2014-67/CVE-2014-1553/CVE-2014-1562 Miscellaneous memory safety hazards - MFSA 2014-68/CVE-2014-1563 bmo1018524 Use-after-free during DOM interactions with SVG - MFSA 2014-69/CVE-2014-1564 bmo1045977...

MozillaThunderbird: Update to 31.1 release (important)

MozillaThunderbird was updated to Thunderbird 31.1.0 bnc894370, fixinfg security issues: MFSA 2014-67/CVE-2014-1553/CVE-2014-1562 Miscellaneous memory safety hazards MFSA 2014-68/CVE-2014-1563 bmo1018524 Use-after-free during DOM interactions with SVG MFSA 2014-69/CVE-2014-1564 bmo1045977...

MailEnable Professional/Enterprise <= 2.37 Denial of Service Exploit

No description provided by source. !/usr/bin/perl maildisable-v7.pl Mail Enable Professional/Enterprise v2.32-7 win32 by mu-b - Wed Feb 14 2007 - Tested on: Mail Enable Professional v2.37 win32 use Getopt::Std; getopts't:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target...

MailEnable 2.x SMTP NTLM Authentication Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20290/info MailEnable is prone to multiple remote vulnerabilities. These issues arise in the SMTP server during NTLM authentication and may facilitate arbitrary code execution or denial-of-service conditions. MailEnable...

Microsoft Windows 2000 telnet.exe NTLM Authentication Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1683/info By default, the telnet client telnet.exe shipped with Microsoft Windows 2000 utilizes Windows NT Challenge/Response NTLM as an authentication method. When establishing a connection to a host, the telnet client...